REMARKS 

Applicants respectfully traverse and request reconsideration. 

Applicants' attorney respectfully notes that the Information Disclosure Statement 
attached to the office action only shows that the first reference in the statement has been 
initialed by the Examiner. Applicants respectfully request that the Examiner confirm that all 
of the references have been considered. 

Also, there appears to be a typographical error in paragraph 6 of the rejection since 
Applicants canceled, without prejudice, claims 1-5 in the previous office action. As such, 
Applicants will not address rejections of these claims. 

Applicants wish to thank the Examiner for the "Response to Arguments" provided in 
the final action. Applicants respectfully submit that the section includes new reasoning for 
rejecting claim 10 and cites to another portion of the Rahman reference and provides 
reasonings not provided in the previous rejection. As such, if the rejection is maintained, 
Applicants respectfully request that the finality of the rejection be withdrawn since 
Applicants did not have a proper opportunity to respond to the Examiner's rejection since the 
rejection is being provided for the first time in a final action. 

Claims 6, 7, 17 and 18 stand rejected under 35 U.S.C. § 102(b) as allegedly being 
anticipated by the Shi reference. Applicants respectfully submit that it appears that the 
rejection is using an improper definition of terminology in an effort to reject Applicants' 
claims. For example, the claims use the terms "first unit", "destination unit" and 
"authentication unit". These units are devices and are not software applications as the office 
action alleges. For example, throughout the Specification, Applicants' Specification 
specifically states that the disclosed units are devices. Any different interpretation is contrary 
to Applicants' Specification and therefore is improper. The office action alleges that the Shi 
reference teaches the claimed "authentication unit" as the "session manager". However, as 
noted in the cited portions of Shi, the session manager is in fact a software component "run 
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by the work station computer 18" (column 6, line 18). As further stated in Shi, an example of 
the web server platform 12 includes a work station. As further noted in column 6, it states 
"The session manager 27 is thus invoked". As such, the session manager is not a device as 
required by the claim but to the contrary, is a software application executed by the web server 
18 (alleged first unit). Using the office action interpretation, (session manager is 
authentication unit and server 18 is first unit) Shi teaches that the alleged first unit contains 
and executes the alleged authentication unit. This is contrary to what is claimed. 

Applicants claim communication among three different devices in a unique way 
which includes among other things, that the authentication unit receives from a first unit, user 
identification data to determine which destination unit of a plurality of destination units, other 
than the first unit, will receive an authentication code to be used to authenticate the user. 
Once the appropriate destination unit has been determined, the authentication code is sent to 
the determined destination unit based on the user ID data. The authentication code is 
returned back and the user is authenticated based on the returned authentication code when it 
matches the sent authentication code. 

Shi describes a different system. Since the web server is alleged to be the claimed 
first unit and since the session manager is in the same device as the web server, there is no 
authentication unit in Shi that receives from a different unit, the user ID data. In fact, the Shi 
reference teaches that the same unit merely transfers user identification data to a software 
application of the same unit. Since the claim terms appear to have been mischaracterized and 
since the reference does not teach the claimed subject matter, Applicants respectfully submit 
that the claims are in condition for allowance. Other differences will be recognized by those 
of ordinary skill in the art. 

Claims 3, 8 and 19 stand rejected under 35 U.S. C. § 103(a) as being unpatentable over 
Shi in view of McCann. Applicants respectfully reassert the relevant remarks made above 
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and as such, these claims are also in condition for allowance. In addition, claim 8 requires 
that per-user destination unit data is maintained that includes a destination unit identifier per 
user and using the user ID data to determine which destination unit will receive the 
authentication code. The determined destination unit is based on the stored per-user 
destination unit identifier. As admitted in the office action, Shi discloses that the web server 
transmits a generated unique ID to the same client which requests services. (Page 6 of office 
action). However, the "client" in Shi is the same client that sends user identification data. 
(See cited portion, column 6, lines 28-29). As taught in Shi, it is the user and hence the client 
10 that sends the user identification data. As such, the definition of "first unit" apparently 
used to reject these claims is the "client" of Shi. This interpretation is different from that 
promulgated above and as such, the claim is also in condition for allowance since a different 
definition of corresponding elements is being used to reject these claims. 

It is also alleged that the reason one would combine McCann with Shi is that it would 
provide "reduced response time as taught by McCann". However, Applicants' claim is 
directed to utilizing a destination unit other than a first unit, as a mechanism to facilitate 
authentication. Neither reference alone or in combination contemplates such an operation. If 
the rejection is maintained, Applicants again respectfully request a showing as to how the 
alleged motivation is relevant to the claimed subject matter and further request an 
identification as to what corresponds to the claimed destination unit other than the first unit in 
either the Shi reference or the McCann reference. 

Remaining claims 9-20 stand rejected under 35 U.S.C. § 103(a) as being unpatentable 
over Shi in view of Schneier. Applicants respectfully note that these claims are allowable at 
least as depending upon allowable base claims. 

Claims 10, 11, 13, 16, 21, 22 and 24 stand rejected under 35 U.S.C. §103(a) as being 
unpatentable over Shi in view of Rahman. As noted above, the "Response to Arguments" 
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section includes new reasoning and a new cited portion of Rahman not previously provided in 
a previous office action. In fact, the only cited portion of Rahman to reject the claims was 
column 2, lines 37-41 (see page 8 of office action). Applicants respectfully submit that it 
appears that there is a misunderstanding of the Rahman reference. The Rahman reference is 
directed to a data session setup system for a wireless network and specifically defines a 
"forward link" as being a direction from which data is sent from a base station to a wireless 
unit. A "reverse link" is the direction wherein a wireless unit sends or transmits information 
to a base station. (See column 1, lines 24-30). As such, a forward link and a reverse link are 
used as a same primary channel during communication to provide a bi-directional 
communication channel. Moreover, the Rahman reference is actually directed to a "session 
setup" invention as admitted in the office action. As such, information is communicated via a 
circuit switched link to "setup" another link. In contrast, claim 10 and other claims are 
actually referring to what occurs "during a session" requiring that a communication link has 
already been established. As such, the Rahman reference and Applicants' claim is directed to 
two totally different portions of operation. 

Moreover, a "back channel" is not the same as a "reverse link" as alleged in the office 
action. As claimed, during a session, the claimed method actually requires the use of 
differing channels during the same session. The claims are not directed to a forward direction 
link and a reverse direction link but to the contrary, are directed to differing communication 
channels meaning that the back channel is not the regular or primary channel used to form the 
session. Rahman describes a regular bi-directional forward and reverse communication 
channel as known in the art. By way of example, Applicants' Specification describes a 
primary channel as, for example, a wireless GSM or WCDMA channel and a back channel 
may be, for example, an SMS messaging channel. As such, a different device such as a pager 
or other device may be used to communicate an authentication code. In another embodiment, 
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a radio telephone uses a primary wireless channel and a pager is sent the authentication code 
via a paging channel. As such, the reference does not teach the claimed subject matter. 

Moreover, the actual teachings of the reference must also be taken into account. As 
taught in Rahman, different directional channels are used as the primary channel to establish 
an initial connection. In Rahman, by using a circuit switched link to send data session setup 
packets, the Rahman system attempts to avoid the delay associated with requesting and being 
allocated wireless resources and sending the setup packets using the packet switched link. 
Combining Rahman with that of Shi would simply result in a system of Shi which sent 
information back to the web browser apparently via a wireless network that employed the 
session setup operation described in Rahman. Neither reference alone or in combination 
contemplates the claimed subject matter and as such, Applicants respectfully submit that the 
claims are in condition for allowance. 

The dependent claims add additional novel and non-obvious subject matter. 

Accordingly, Applicants respectfully request that a timely Notice of Allowance be 
issued in this case. The Examiner is invited to contact the below-listed attorney if the 
Examiner believes that a telephone conference will advance the prosecution of this 
application. 

Respectfully submitted, 

Date: March 11, 2008 By: /Christopher J. Reckamp/ 

Christopher J. Reckamp 
Registration No. 34,414 

Vedder Price P. C. 
222 N. LaSalle Street 
Chicago, Illinois 60601 
PHONE: (312)609-7599 
FAX: (312)609-5005 
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